| Key | Value |
|---|---|
| FileSize | 219100 |
| MD5 | BA491A331A02A2EE2C604C622B2DF555 |
| PackageDescription | Security Information and Events Management System [ Log Agent ] The Prelude Log Monitoring Lackey (LML) is the host-based sensor program part of the Prelude SIEM suite. It can act as a centralized log collector for local or remote systems, or as a simple log analyzer (such as swatch). It can run as a network server listening on a syslog port or analyze log files. It supports logfiles in the BSD syslog format and is able to analyze any logfile by using the PCRE library. It can apply logfile-specific analysis through plugins such as PAX. It can send an alert to the Prelude Manager when a suspicious log entry is detected. |
| PackageMaintainer | Pierre Chifflier <pollux@debian.org> |
| PackageName | prelude-lml |
| PackageSection | admin |
| PackageVersion | 4.1.0-2 |
| SHA-1 | CB68898A83766127130C31175383A2E0B3D6250B |
| SHA-256 | A5DA449ED96B05D6A93DBE7560FBD3B7F2F1E6F0F98FFB0E0C09BDF0F5E9B469 |
| hashlookup:children-total | 16 |
| hashlookup:trust | 50 |
The searched file hash includes 16 children files known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| FileName | ./etc/prelude-lml/prelude-lml.conf |
| FileSize | 6917 |
| MD5 | 4B210089C022CDA5FEEA7F84D448EF59 |
| SHA-1 | 2A4275053E100658A3AABDC4B42FAFFCCCFBEE6D |
| SHA-256 | 1034D4064DA3BA5574B02FA1EAB815AA3CFC27C653A477AB40D3BAB0E06D469F |
| SSDEEP | 192:mKqkehijEnNUiXyB0Xus6vzGUgp4MlO25e:mkSPUsWkOP |
| TLSH | T133E17466D24D373B13CB03A150AEE1DD9B3D904D6E73341262DD98683201E7892FBBE5 |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/prelude-lml/HACKING.README |
| FileSize | 756 |
| MD5 | 1475976CC703D5CACF83483486774A0B |
| SHA-1 | 2FCBA98BFEAFCEA21E12CAD85F979583F9B51DA0 |
| SHA-256 | 1DB2E6985C825EB5742271954E017E2F8DDEE0A11A022EDDA6F9A00C19F7846C |
| SSDEEP | 12:hBe+oVOrqLRh1y4AvoInFbyE0MevyCmFQMl9Kr1yAHkxbpfgtthcAkU5tDWg2:XywrqLvw49IxM5yCmFjqNHkxNEeAvW |
| TLSH | T19D01D01EF26C62A4198105E17682E3F2660F41DACB324432E257D4C533BBA7E853F5DD |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/prelude-lml/changelog.Debian.gz |
| FileSize | 3014 |
| MD5 | E9F0C0666FC932F99FA5A167388FE448 |
| SHA-1 | 44B8C8DFCA878E5AE9B267C22CCAF09494A7EE9C |
| SHA-256 | 3960BF86FC2D94B0BF418C50931A13BEA53B0B567418128A8AD0871CD908D5A6 |
| SSDEEP | 48:XYuPxJB1oFyoclBTxlRlKSmirigY8ZQkbjUMD54wH9T+fbbbR9bK3XKLug+53drm:oObB1OclBT9ovi3Yqmyt+fbbbRVK36YS |
| TLSH | T1E2515DBEC81C5DF10EE92C30C15E5618A62C113EFD8F552074E3C46BB4670AAD5CE684 |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/prelude-lml/README.Debian |
| FileSize | 517 |
| MD5 | 1298A4E7F1407B397C009E970A0EA593 |
| SHA-1 | 487955E33B167AA2C765B8B1BC951E55608DC0BA |
| SHA-256 | 2FC3B69E22C20B480C2AA5B833AD58E4BB3096BF6AC1D2EEA10F0327426B581B |
| SSDEEP | 12:nkcoBHPyNmY/m5LaR9dEB+EsRFkcvhY1V2kK0huKIcKe/m9:QNKmY/m5LudEB+EsbhCfK0huKIcKeu9 |
| TLSH | T1F9F09EE66DCD788511F0DBEAF022C090D65BFC5E50407131700CE1EE410234C05CE210 |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/prelude-lml/copyright |
| FileSize | 7030 |
| MD5 | 1CBEF425C9C3FA5C7ADC119185A99A53 |
| SHA-1 | 50CCBF06F6C0F142785409FB58D1E05F9CB09037 |
| SHA-256 | 2298353684BA3A7062161C6E2D1EC4BE3C86396B91B307F5CC1487D34C0970BD |
| SSDEEP | 192:xZPRDLOrXc3vlRH3o13hy5pWo/z4zqeFs:xNRDars3vvXqhUWo/z4zqeFs |
| TLSH | T108E1854E1940C7BB19C01BA0394E95DEE31757EE767EC490105E939EAE0BB3A17F24E4 |
| Key | Value |
|---|---|
| FileName | ./usr/lib/x86_64-linux-gnu/prelude-lml/pcre.so |
| FileSize | 39096 |
| MD5 | B4B575E38EF1018626147ECF734A6883 |
| SHA-1 | 8424A65228D8176E364CCBE4595D6F2148AC17AF |
| SHA-256 | B177C38E77F72CF6B8855151062ACA862B3A19AC94ED49465E54BAC9D7341923 |
| SSDEEP | 768:2cE/G7AcT4YcDCSkYoW7SSXYqvgcuoC7GntvjNK:2cE/G7AcEYcoWG9FcuoiEJjY |
| TLSH | T1FA034B5BB1A148FCC5D08570CE679A71A9703016D311AA3BB544A7782E82F349B2FF3A |
| Key | Value |
|---|---|
| FileName | ./lib/systemd/system/prelude-lml.service |
| FileSize | 152 |
| MD5 | 8C583644419BCD84F97511F76D10284A |
| SHA-1 | 9E329CC69398403460EDDA0CDA307153F7980D0A |
| SHA-256 | B1833CB9E3EAE96398A4645ED706256053E9BA15B6EE81F4ABED3BFC2200DD66 |
| SSDEEP | 3:zMZa7+rUSXABlRVGmDMzdK+aQ9sHSdS5czTLESkQmWA1+DRvn:z8tU6wlzGmDMzdK+aG858ILQmWA4Rv |
| TLSH | T1C3C08C29F48064A0980A2AABCE724BA85A504508AF8DF82436A124291AC0656A4348A9 |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/prelude-lml/changelog.gz |
| FileSize | 130440 |
| MD5 | C491AD306C3874741112AFF482CEDAFF |
| SHA-1 | AEF35D708636EA9C9FAF626B3DC45D38D90497B7 |
| SHA-256 | E7BB2173DA1C8DC2DACD71755C8C78866BEE90C1A10F2B54FF3FBF03C562C1CF |
| SSDEEP | 3072:R9e9lrNLKlL3v4l9coNKg3RS0KGFXGXwKPAnbPq/y/S4ydBFrcj:R9e/rNkzA3YmFBZGASAnbia/S4ydBFrY |
| TLSH | T134D312248439252D54981C96869BFB84DFE6AABA31376F3AF1C2F544782BF4CC670DD0 |
| Key | Value |
|---|---|
| FileName | ./usr/bin/prelude-lml |
| FileSize | 141504 |
| MD5 | 491B1121E6D7CB84CED401BAA29F1EA4 |
| SHA-1 | B33723CDF8B2FB7FE096557D85C4BC68D006622F |
| SHA-256 | EF2FB18246CC421A18C9DBCEA0626AF99D8FE5F887E98D8BFF8CED13733133C4 |
| SSDEEP | 3072:Wg3sNRMlaSNO76yVQG/OxfXeDChSXSPtQFX2lMC:WWaSqQG/OxfXJSug |
| TLSH | T150D36C0BB29159BCC5C1C570C9AB92623A70B448D321673F3D45A7782F12F686B2FB76 |
| Key | Value |
|---|---|
| FileName | ./usr/include/prelude-lml/prelude-lml.h |
| FileSize | 2439 |
| MD5 | 9A72521F2588924E6A03B1DF1B06E871 |
| SHA-1 | CC634DDA111D1365B631E1871E3C033309CB4764 |
| SHA-256 | DB0633C74EFB1F5703926B8FE6D8A4BD8EE06FD06F6D04DF4364E7A226486CF5 |
| SSDEEP | 48:9amdpey3HTyiDNxUbta6zr4yno6SuYUSui7WoPoFnojTTnOB05s:9TBD0XZ/Z |
| TLSH | T13441A9D0983EC7A63DB20BF120D652C3600962ED7A65DAC2754EF35C446737C1222BA3 |